© Publication nunnber: 0 381 365 

A2 



® EUROPEAN PATENT APPLICATION 

0 Application number: 90300739.1 @ Int. CI S: G06F 15/16 



@ Date of filing: 24.01.90 



@ Priority: 31.01.89 US 304696 


® 


Applicant: International Business Machines 


@ Date of publication of application: 




Corporation 




Old Orchard Road 


08.08.90 Bulletin 90/32 




Armonk, N.Y. 10504(US) 


@ Designated Contracting States: 




Inventor: Owens, Gary Lewis 


DE FR GB 




111 North Rengstorff, Apt. 173 






Mountain View, California(US) 




® 


Representative: Bailey, Geoffrey Alan 






IBM United Kingdom Limited Intellectual 






Property Department Hursiey Park 






Winchester Hampshire S021 2JN(GB) 



@ A system and method for interconnecting applications across different networks of data 
processing systems. 



JEuropaisches Patentamt 
European Patent Office 
Office europeen des brevets 



@ The system and method of this invention auto- 
matically routes a connection between data process- 
ing systems (1 1.41) in different network domains. As 
an example, an application running on a data pro- 
cessing system utilizing a network domain such as 
TCP (11) (Transmission Control Protocol), can auto- 
matically make a connection to another data pro- 
cessing system (41)-utilizing a different network do- 
main such as SNA (Systems Network Architecture). 
The connection (70) is automatically performed in 
the layer containing the communication end point 
objects (12,32,42). In a preferred embodiment, the 
connection is automatically performed in the socket 
flayer of the AIX operating system, or in the socket 
flayer of other operating systems based upon the 
in Berkeley version of the UNIX operating system. 
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A SYSTEM AND METHOD FOR INTERCONNECTING APPLICATIONS ACROSS DIFFERENT NETWORKS OF 

DATA PROCESSING SYSTEMS 



This invention relates to a network of data 
processing systems, and more specifically to the 
interconnection of a plurality of data processing 
systems between different network protocol do- 
mains, such as the different network protocol do- 
mains of SNA and TCP/IP. 

A system having multiple domains has at least 
one data processing system that is interconnected 
to at least two different data processing systems 
through at least two different network domains, i.e. 
network protocol architectures. A problem with mul- 
tiple domains is the difficulty in allowing commu- 
nication between machines which are connected to 
another type of network. For example, a data pro- 
cessing system utilizing SNA LU 6.2 as Its network 
protocol can not automatically communicate with 
another data processing system utilizing TCP/IP as 
its network protocol. Both SNA LU 6.2 and TCP/IP 
are examples of stream protocols where data flows 
as a stream of indeterminate lengths, and the bytes 
are delivered in the correct order. The problem is 
routing a stream of bytes from a data processing 
system that utilizes a reasonably equivalent pro- 
tocol, such as a stream protocol, to another data 
processing system that also utilizes a reasonable 
equivalent protocol, such as the stream protocol of 
this example, but wherein the two protocols are not 
the exact same protocol, such as SNA LU 6.2 and 
TCP/IP. 

It is known to solve the above problem at the 
application program level. An application program 
which is running on a data processing system at 
one end of the connection may be designed to 
utilize a specific network protocol. In this case, it is 
known to modify the application in order to reim- 
plement the application to work over another pro- 
tocol. This requires changing the source program 
code of the original application by some amount. 
Depending upon how the application program was 
originally designed, this may require a substantial 
amount of changes to the program code. 

It is also known to solve the above problem by 
implementing the same protocol on both machines. 
For example, in order to use an SNA transaction 
application running in an SNA network, to apply 
transactions against data processing systems utiliz- 
ing a TCP network, one could reimplement that 
transaction application against TCP by then putting 
TCP on the client data processing system, put IP 
over SNA, and gateway between the two. The 
client data processing system can then be imple- 
mented utilizing TCP/IP. The problem with this 
approach is having to reimplement the application 
to utilize the different protocol at one end of the 
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network or the other. This is especially burden- 
some if the application is large and complex. 

There are some application level protocols that 
handshake back and forth over SNA, e.g. 3270 

5 SNA. These have their own data format with meta- 
data in the data stream. There are other application 
level protocols, such as Telnet over TCP. that talk 
back and forth that have meta-data and data in the 
data stream. However, one can not get these two to 

70 talk together since these two have different data 
and meta-data in their data streams. 

If an application utilized one protocol, and that 
application were to run on a data processing having 
a different protocol, knowing the data stream for- 

75 mat, one could write the client half of the applica- 
tion on the data processing system utilizing the 
other protocol. 

Therefore, in order to extend network connec- 
tivity, it is known to reimplement the application to 

20 utilize the different protocol, put one protocol on 
top of the other, and gateway between the two. It is 
also known to build a larger network utilizing each 
type of protocol through replication and duplication. 
The term "sockets" is an application program 

25 interface (API) that was developed for the Berkeley 
version of AT&Ps UNIX (UNIX and AT&T are 
trademarks of American Telephone and Telegraph 
Company) operating system for interconnecting ap- 
plications running on data processing systems in a 

30 network. The term socket is used to define an 
object that identifies a communication end point in 
a network. A socket can be connected to other 
sockets. Data can go into a socket via the under- 
lying protocol of the socket, and be directed to 

35 appear at another socket. A socket hides the pro- 
tocol of the network architecture beneath a lower 
layer. This lower layer may be a stream connection 
model (virtual circuit), or a datagram model 
(packet), or another model. 

40 A Stream connection model refers to a data 

transmission in which the bytes of data are not 
separated by any record or marker. A virtual circuit 
implies that there appears to be one communica- 
tions end point connected to one other communica- 

45 tions endpoint. When the connection is established, 
only those two end points can communicate with 
each other. 

Sockets are typed by domain (address family 
or network type), and model type (stream, datag- 
50 ram, etc.). If needed, the socket can be further 
specified by protocol type or subtype. The domain 
specifies the addressing concept utilized. For ex- 
ample, there is an internet IP domain, and also a 
SNA domain for networks utilizing TCP and SNA, 
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respectively. As used herein, the word "domain" is 
used to refer to the address family of a socket, and 
not to a domain-naming domain, A domain-naming 
domain is a concept of a related group of hierarchi- 
cal addresses, wherein each part of the address is 
separated by a delimiter, such as a period. 

Since a socket is specified by the domain, 
sockets do not allow cross domain connections. 
This means that if an application program creates a 
socket in the Internet (Darpa) domain, it can only 
connect to sockets in that same domain. Note: 
"Darpa" is used to specify that Internet, short for 
internetworking, is not only used herein both to 
generically specify the internet layer of a particular 
protocol family which contains means for forward- 
ing, routing control, and congestion control, etc., 
but also as a name for a particular implementation 
of an internet called the Internet or the Darpa 
Internet, or the Arpa internet. Another name for this 
internet layer is the Internet Protocol (IP). TCP/IP is 
also commonly used to refer to this protocol. 

Originally, the requirement that a socket can 
only connect to sockets in the same domain was a 
reasonable restriction. This simplified the program 
code when there was only one really useful domain 
anyway. With the advent of the usage of other 
domains (specifically SNA), cross domain connec- 
tions have become desirable. For example, cross 
domain connections would allow mailers to trans- 
port mail among domains. Also, cross domain con- 
nections would allow programs to communicate 
using the existing communication networks. 

Viewed form one aspect the invention provides 
a system for communicating between a first data 
processing system in a first network domain and a 
second data processing system in a second net- 
work domain, said system comprising: at least one 
communication end point object in a layer of each 
of said first data processing system and in said 
second data processing system; means, indepen- 
dently of an application running on either of said 
data processing systems, for automatically routing, 
in said layer, a connection between said first pro- 
cessing system and said second processing sys- 
tem; and means for communicating over said rout- 
ed connection between said first data processing 
system and said second data processing. 

Viewed from another aspect the invention pro- 
vides a data processing network having a first data 
processor communicating with said network using 
either a first communication protocol or a second 
communication protocol and a second data proces- 
sor communicating with said network using said 
first data communication protocol, said data pro- 
cessors having an application program interface 
including communication end points via which ap- 
plication programs may communicate, each said 
communication end point being adapted for com- 



BN8DOCID: <£P_0381366AejLj> 



381 365 A2 




munication using a single one of either said first 
communication protocol or said second commu- 
nication protocol, characterised in that said first 
processor includes connection logic interposed be- 

5 tween communication end points in said first pro- 
cessor for routing data from a communication end 
point adapted for communication using said first 
communication protocol to a communication end 
point adapted for communication using second 

;o communication protocol. 

This invention automatically routes a connec- 
tion between data processing systems, indepen- 
dently of an application running on the data pro- 
cessing systems, having different network domains. 

;5 The preferred embodiment describes the cross do- 
main interconnections with reference to the dif- 
ferent network domains of TCP (transmission con- 
trol protocol) and SNA (systems network architec- 
ture). 

20 The routing is automatically performed at a 

layer which contains the communication end point 
objects thereby simplifying the implementation of 
cross-domain communication. In the AIX (AIX is a 
trademark of International Business Machines Cor- 

25 poration) operating system, and other operating 
systems based upon the Berkeley version of the 
UNIX operating system, this layer is called the 
socket layer. 

An intermediate processing system is utilized 

30 to gateway between a processing system utilizing a 
network domain such as TCP, and another pro- 
cessing system utilizing a different network domain 
such as SNA. Alternatively, the client data process- 
ing system can be implemented utilizing TCP/IP 

35 which can then be gatewayed through socket rout- 
ing on the same machine into an SNA data stream 
without an intermediate processing system per- 
forming the socket routing. 

In any event, the socket layer which performs 

4Q the socket routing contains facilities to automati- 
cally route a connection across different domains. 

In the client processing system which is at- 
tempting to create a connection, a socket is cre- 
ated in a particular domain. If the socket is in a 

45 different domain, the socket does not fail if the 
socket routing facility of this invention is imple- 
mented. The connect function is modified to catch 
the attempts at a cross domain connection. If a 
connect function is attempted on a socket in a 

50 different domain, then the socket routing facility of 
this invention is invoked. 

Alternatively, a connectto function can be im- 
plemented which takes the place of and combines 
the functions of the socket function and the con- 
55 nect function. With the connectto function, a 
socket is not created until the route is known. This 
alleviates the unnecessary work of creating a sock- 
et which may fail, and then performing actions as a 
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result of the failed socket. The connectto function 
determines how a connection can be made, and 
then creates a socket in the domain that is needed 
to establish the determined connection. 

Through either of the above approaches, a 5 
connection to a socket in a different domain can be 
made through an intermediate socket. When data 
arrives from one end of the connection to the 
intermediate socket, the intermediate socket imme- 
diately sends the data to the other end of the 10 
connection instead of queuing the data for process 
intervention at the intermediate processing system. 

In addition, if the intermediate socket is queried 
for the address of the other end of the connection, 
the intermediate socket identifies the connecting 15 
host as opposed to the intermediate host. In this 
way. the socket routing facility of the intermediate 
host is transparent to the hosts at each end of the 
connection. 

An embodiment of the invention will now be 20 
described, by way of example only, with reference 
to the accompanying drawings in which: 

Fig. 1 is a diagram showing a connection 
from a process AA on host A to a process CC on 
host C. Socket routing is utilized to cross the 25 
boundary between the networks of type A and type 
C at host B. 

Fig. 2 is a flow diagram showing the oper- 
ational scenario of Fig. 1 using explicit and implicit 
routing. 30 

Fig. 3 is a flow diagram showing the modi- 
fied steps in performing a connect () function to a 
destination. 

Fig. 4 is a flow diagram showing the steps of 
creating a socket if the host does not have a socket 35 
in the specified domain. 

Fig. 5 is a flow diagram showing the steps 
performed at host B. 

Fig. 6 is a flow diagram showing the steps of 
a connectto () function. 40 

Fig. 7 is a more detailed diagram of the 
socket routing facility of this invention. 

The following description describes an archi- 
tecture for routing virtual circuits based on sockets. 
Although this implies stream sockets, the invention 45 
is not limited to stream protocols or to sockets. The 
concepts of this invention could be applied to simi- 
lar communication end points that are utilized with- 
in other operating systems. 

Referring to Fig. 1, a process AA, 10. In a data 50 
processing system 11. host A. desires to connect 
its socket facilities 12 to the process CC, 40. in a 
data processing system 41, host C. The data pro- 
cessing system 11 is shown as only supporting a 

particular domain of sockets AF A. 13, such as 55 

TCP, and data processing system 41 is shown as 
only supporting sockets that exist in the domain 
having address family C, 43. Since the naming 
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conventions and the underlying transport mecha- 
nisms are different between address family A, 13, 
and address family C, 43, no interconnection can 
take place without an intermediate facility. The in- 
termediate facility is the socket routing facility 70 in 
socket layer 32, which exists in data processing 
system 31 , shown as host B. 

To describe the initiation of a connection, the 
process AA. 10. in the data processing system 11, 
wilt activate a connection through the sockets pro- 
gramming interface to the general socket code, 12, 
which in turn goes through the address family 

specific socket code for AF A, 1 3. The necessary 

data and control information will be handled by the 
interface and physical access layers, 14. The data 
will then go out on the network 50 and end up 
going into data processing system 31, shown as 
host B, via the interface layer 34, and then through 

the code for address family A, shown as AF A, 

36. 

For comparison, data processing system 21, 
shown as host D, shows existing internet routing 
within a single address family, the address family 

A. AF A, 23. It should be noted that the cross 

connection occurs within the address family A, 23. 
Almost any TCP/IP implementation can route within 
its own address family. Likewise. SNA has similar 
gateway and forwarding capabilities. The cross 
over as shown in data processing system 21 is 
independent of the model type of either stream or 
datagram. It is only dependent upon being within 
the same network domain. 

In data processing system 31. the connection 
request packets will go through the interface layer 

code 34 to the address family A code, AF A. 36, 

through the general socket layer 32, and into the 
socket routing code 70. The socket routing code 
facility 70, is where the address mapping and cross 
connection takes place. The cross connection ar- 
rows 37 are shown drawn in the socket routing 
layer 70 of data processing system 31, as opposed 
to the cross connection arrows 27 which are shown 
in the address family code 23 of data processing 
system 21. 

A connection request generated in the socket 
routing code 70 of data processing system 31 will 
then go down through the address family C code, 

AF C, 33, and through the interface layer code 35 

for the other network 60, such as SNA. The con- 
nection request packets go across the network 60 
to the interface layer code 44, up to the address 

family C code, AF C, 43. continuing through the 

general socket interface layer code 42 where the 
connection is registered. Then the process CC. 40, 
can respond to the connection request in order to 
establish the connection between cross domain 
networks. 

Figure 7 shows item 70 of Figure 1 in greater 
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detail. Item 701 is the programs and data for con- 
trolling the socket routing facility. A connection 
request to establish socket routing will come in on 
the sockets for this service, items 704, and 705. 
The routing agent software, item 703. will accept 
the connection, which creates a data socket, items 
709 - 714. The route request message will come in 
on that data socket, and the routing agent, 703. will 
consult its route database. 702. to see if a route is 
possible. If a route is possible, the routing agent, 
703, will consult its route database, 702, on how to 
establish the route. Then, the routing agent creates 
a matching data socket (item 710 for item 709, 
etc.), and connects to the next hop. When the 
routing agent software receives any replies for fur- 
ther route hops, it forwards them back to the sock- 
et routing requestor via the accepted data socket. 
When all hops are made, the socket routing agent 
will create a data transfer agent, items 706 - 708. 
that joins the pairs of data sockets, and forwards 
data from one to the other and vice versa. 

The above scenario is further described in the 
following programming design language code. The 
following includes examples and uses programs 
and function names to describe the operational 
scenario of Fig. 1. The following operatlonai sce- 
nario assumes a telnet (or similar program) con- 
nected to a remote processing system that is sepa- 
rated by at least one domain boundary. The follow- 
ing uses three machines: "host A" is connected 

to "host_B" via TCP. and "host__B" is connected 
to "host_C" via SNA. 
Vfrom application view/" 

user on host A says "telnet host C" 

telnet does a gethostbyname for "host C" 

telnet tries to create a socket for domain of 
••host__C" 

- it fails. 

telnet does a getservbyname for sockroute 

- it finds (the only) sockroute available in TCP 
domain 

telnet invokes sockroute function to get which do- 
main to initiate the connection in (or to get a route 
to host__C) 

since telnet knows it is now using socket routing it 
uses the (initial domain and routelist) to 

1 . create a socket in Its initial domain. (TCP) 

2. connects to sockaddr of "host__C" telnetd 
-or "connectto routelist telnetd" when socket con- 
nect succeeds, proceed as any SOCK STREAM 

app would 

- alternatively ( with connectto() as "full function") 
user on host__A says "telnet host_C" 

telnet does a gethostbyname (or getaddrbyname) 

for "host C" - to see if it exists and to get 

host_C*s address 

telnet does a "connectto ( host C:telnetd. 

SOCK STREAM) - which gets a connected sock- 



et. 

The above program design language code is 
further explained with reference to Figures 2-4. 
The term "telnet" is a remote terminal emulator 
5 having the argument "host_C". This invokes the 
terminal emulator to a remote host, which in this 
case is "host C". step 201. Fig. 2. 
"Gethostbyname" is a function call of the telnet 
program which gets the addressing information for 
70 host C, step 203, Fig. 2. The addressing informa- 
tion for host C will include a domain and an ad- 
dress within the domain. 

At this point, the routing can be performed 
either explicitly or implicitly. Explicit action would 
;5 involve the user code invoking a router function, if 
the initial attempt to create a socket fails, implicit 
action would simply be doing a connectto () on 
the destination address. In explicit routing, the ad- 
vantage is explicit control by the application. The 
20 disadvantages are lack of centralized control, and 
more complicated user code. In implicit routing, the 
advantages and disadvantages are just the op- 
posite of those stated above. In implicit routing, the 
advantages are more centralized control, and less 
25 complicated user code. In implicit routing, the dis- 
advantage Is that the application does not have 
direct control. 

With explicit routing, Telnet tries to create a 
socket within that domain, step 204. If the host 
30 does not have sockets of that domain, step 205, 
the socket creation will fail, step 211. At this point, 
the application. Telnet, invokes a router function, 
step 213 Fig. 4, if the socket attempt failed, step 
211. If the host does have sockets within this 
35 domain, the socket attempt will succeed, step 206. 
If the socket attempt succeeds, the application 
does a connect (), step 215. The connect () is 
further shown with reference to Fig. 3. if the con- 
nect 0 succeeds, step 217. Fig. 2, the commu- 
te nication between the two processes proceeds as is 
typically known in the art, step 207. 

If a connect in the same socket domain failed, 
then (possibly with a socket option set) the socket 
routing would be invoked. This provides implicit 
45 routing. Fig. 3. even in the case of a connection 
between two domains of the same type, using an 
intermediate domain of different type. 

As shown in Fig. 3. modifying the function 
connect () enables the connect () to catch those 
50 situations in which socket routing is needed to 
gateway between two like domains using unlike 
domains. If a normal connection, step 301 , fails, 
step 303, and the failure is due to the destination 
network being unreachable, step 307. then an at- 
55 tempt at implicit routing will be made. This begins 
with step 311 where a socket route is sought for 
the destination. If no route is found, then an error is 
reported, step 315. If a route is found, a connection 
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is made to the socket routing service at the first 
hop. step 317. Then, a route request is sent, step 
319, and the route request replies are received, 
step 321. until all the hops are connected, step 
323. At this time, a connect up request is sent to 
tell all of the routers to set up the line for data 
transmission, step 325. After the connect up reply 
is received, step 327, the peer address of the 
destination is set for the local socket, step 329. and 
an indication of success is returned to the invoker 
of this connect, step 331 . 

Referring back to Fig. 2, a connectto function 
can be added to the generic socket layer code to 
implement implicit routing from an application level, 
step 221, Fig. 2. The connectto function is called 
instead of a socket function and a connect function. 
The function of the socket system call and the 
function of the connect are combined into the con- 
nectto function. The advantage of this is that the 
connectto function can handle more addressing 
issues. Also the connectto function does not need 
to create a socket in the kernel, which may fail, and 
then have to act upon the failed socket. 

The socket parameters of the connectto func- 
tion would include the type and the protocol. Since 
the previous connect call has arguments for the 
host name, the connectto function would take the 
name of the host in a more portable form, such as 
the name of the host in a text stream, whereas, 
connect takes the name of the host in a socket 
structure. 

Referring to Fig. 6. the connectto() function is 
further described. If connectto() is implemented 
so that it takes a host name as an argument, then it 
gets the destination address, step 601. Using this 
address, the function checks the route table for the 
destination, step 603. If no route is found, step 605, 
then an error is returned, step 607. If the destina- 
tion is in the same domain, and no unlike domains 
are required for gateways, step 609, then a socket 
is created in the same domain, step 611. A normal 
connection is established to the destination, step, 
612. The route for communication is then estab- 
lished, step 613. 

If the destination is not the same domain or 
unlike domains are required for gateways, step 
609, then a socket is created in the domain of the 
first hop, step 615. A connection to the socket 
routing service at the first hop Is then established, 
step 617. A route request is sent, step 619. and a 
reply to the request is received, step 621, until all 
hops are connected, step 623. After this, a connect 
up request is sent, step 625. and its reply is 
received, step 627. The peername of the destina- 
tion is set for the local socket, step 629. The route 
is now available for normal communications, step 
613. 

With the following modifications, referred to as 
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socket routing, the creation of a socket can con- 
tinue, step 213, as shown in Fig. 4. when the host 
does not have a socket in the specified domain, 
step 205, Fig. 2. The modifications take place at 

5 the client side, host A. Host C is referred to as 

the server. 

The telnet application performs a 
"getservbyname" function for the socket routing 
service, step 401, Fig. 4. If, for example, the host 

70 only has sockets in the TCP domain, telnet will find 
the only socket route available in the TCP domain, 
step 403. Next, telnet uses the sockroute function, 
step 405, to determine the route and what domain 
of socket to create, step 406. Then, the socket is 

75 created for the initial hop of the route, step 412, 
and then the connection would be set up, step 413. 
At this point, the application can talk to the host as 
it otherwise would have with any other socket 
stream, and in this case, using the telnet data 

20 stream, step 414. 

Assuming the route initialization is done by a 
daemon or library function on host_A (and not 

kernel code), then host A's socket code doesnt 

really have much to do with socket routing. Ba- 

25 sically, if socket routing is performed outside of the 

operating system kernel on host A, then no 

changes to host A's socket code need to be 

made. 

The following programming design language 
30 code, and the following description with reference 

to Figure 5 describes what happens on host B. 

V on host_B r 

sockroute daemon receive connection from host A 

(asking for connection to host C) 

35 sockroute daemon consults route table -or route list 

provided with connection request. 

sockroute daemon decides to connectto to host C 

via SNA socket (since it is last hop, it doesnt need 

to connect to a sockroute daemon on host C) 

40 when connection completes, host B sockroute 

daemon 

1. sends response back to socket routing on 
host A 

2. cross connects the TCP and SNA sockets 
45 on host B when routing on host A receives re- 
sponse, it pulls out of the way. leaving telnet con- 
nected all the way to host C 

Essentially, the above code describes the sce- 
nario in which a service waits around for a connec- 

50 tion. With reference to Fig. 5. the sockroute 
daemon, which runs on host B. receives connec- 
tions from other processes requesting its services, 
step 501. The sockroute daemon is analogous to a 
telephone operator who is requested to make a 

55 connection to another person from a caller. The 
requesting process, caller, supplies the sockroute 
daemon, operator, with the necessary connection 
information in order to make the connection, step 

6 
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503. Once the sockroute daemon makes the con- 
nection, the sockroute daemon leaves the connec- 
tion. If this connection leads to the final destination, 
step 505, no other sockroute daemons on a next 
host need to be called, and the sockroute daemon 
connects to the final host destination via a SNA 
socket, step 507. However, it is possible to have 
multiple sockroute daemons, operators, that are 
needed to make a connection from a first host to a 
final host destination. If this connection does not 
lead to the final host connection, then another 
sockroute daemon on a next host must be called, 
step 506, and the above steps repeated. 

The sockroute daemon on host B then sends 

a response back to the socket routing service on 

the originating host, host A, step 509. Host B 

cross connects the TCP and SNA sockets on 

host B, step 511- When the routing service on 

host A receives the response, host B pulls out of 

the way. This leaves a telnet connection all the way 
from host A to host C. step 513. 

It should be noted that since host_C is the 
end of the line, its socket layer is entirely un- 
affected for data transfer purposes. 

There is a function called getpeername () that 
is part of the sockets programming interface. A 
socket can also be queried as to which service is 

connected to it. For example, if host C queried its 

socket to determine which service at the other end 
it was connected to, the response would be the 

intermediate host, host B, instead of the actual 

service at the other end of the connection which in 
this example is host A. Therefore, the getpeer- 
name would need input from the socket routing 
code at both ends of the connection, as well as 
some kernel changes, for it to work in a transparent 
fashion. For transparency, the getpeername would 
respond with host A, the real end of the com- 
pleted connection, if the socket in host C was 

queried as to the party at the other end of the 
connection. 

The details of the address mapping and socket 
routing facilities within the socket layer 32, which 
effectuates the cross domain connections, are de- 
scribed hereafter. 

Gatewaying of socket based protocols is 
achieved by looping two sockets together at the 
top end. Such a mechanism would allow a router to 
create a path that would cross domain boundaries. 
A router in this context would be program code that 
would decide how to get to one data processing 
system to the other such as in the internet layer of 
TCP/IP. SNA also has similar code. The mecha- 
nism for looping two sockets together at the top 
end would not require file descriptors, or process 
switching time on the connecting node, once the 
connection is established. 

The following illustrates the changes to the 
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socket layer interface of an operating system, such 
as the AIX operating system that utilizes the Berke- 
ley sockets, that may be made to implement sock- 
et routing of preferred embodiments of this inven- 
5 tion. These changes include the following: 

■ modify "connect" to catch cross domain connects 

• add "connectto" to implement implicit routing 
from application level. 

• as an option, create library functions for routing 

10 ' modify socket buffer handling, etc. to allow cross 
connections without process intervention 
' as an option, add function so getpeername works 
transparently 

" define socket routing protocol and messages (in 
IS kernel or as a daemon) 

• if needed, modify nameserver for domain gate- 
ways and routing Info. 

If connectto is not used to hide the routing 
from the user in a library, it is also possible to 

20 create library functions to perform the routing. 
However, the user will require a facility to figure out 
which machine has a socket routing daemon to 
service an intermediary. These functions(s) would 
allow a user program to invoke socket routing with 

25 minimal effort. Possible function to be defined are: 

' "get route" - user program asks for route 

(useable by connectO) 

"get type of socket I 

should open to get to host" - done against 

30 the return from "get route" -or does implicit 

"get_route". 

' connectto" - (1) looks up route, (2) creates a 
socket in proper domain, (3) established connec- 
tion. 

35 i.e., instead of 

hp = gethostbyname(host); (fill in sockaddr from 
hp ...) so = socket(AF_XX, SOCK__STREAM.O): 
connect(so, sockaddr, sockaddrlen); 
a program does 

40 so = connectto( host. SOCK_STREAM. O): 

In addition, modifying socket buffer handling 
will allow cross domain connections without pro- 
cess intervention. Previously, a socket is set up 
such that when data arrives, the data is stored in a 

45 queue while the data waits for a process to read it. 
At the gateway, the socket routing machine, when 
data arrives from one end of the connection, the 
data has to be automatically sent out the other side 
to the other end of the connection, and vice versa. 

50 A current implementation of socket buffering 

would require that a process be running against all 
the sockets that are cross connected. A more effi- 
cient means would be to add this cross connection 
at a socket buffer layer, so that no process sched- 

55 uling needs to be done to send the data on its way. 
In either case, flags are added to the socket data 
structures. 

As previously mentioned, additional function is 

7 
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added to the "getpeername" function to enable the 
internnediate host to appear transparently in the 
connection between the originating host destination 
and the final host destination. Previously, the sock- 
et peer address has been handled by protocol 
dependent means. A change is required so that 
getpeernameO works correctly. The change in- 
volves having the peer address propagated by the 
route daemons, in both directions. Then the routing 
code at each end of the connection would do a 
"set peer address" operation, which would override 
the protocors peer address function. 

The socket routing facility of this invention also 
requires a socket routing protocol and messages. It 
is desirable that the socket routing code handle 
routing in a flexible manner. To achieve this, a 
preferred embodiment of this invention has a sock- 
et routing daemon on each machine that is an 
interdomain gateway. The daemon would be listen- 
ing on well-known socket(s) for routing requests. 
When a request came in (via a connecting socket) 
the routing daemon would examine the request and 
perform the desired action. 

These requests (and their responses) are as 
follows: 

Messages For Socket Routing Protocol 

- and the information that goes with each message 
route request - sent to request a route be set up 

- originator address 

- hop destination address 

- flag for intermediate or final hop 

route request reply - received to indicate comple- 
tion and success/fail of route request 

- status for success or failure 

connectup request - sent to establish normal data 
pathway 

- <none> 

connectup reply - received to indicate completion 
and success/fail of connectup request 

- status for success or failure 

The socket routing service code is used to 
perform routing at the intermediate nodes, i.e. the 
gateway node. When a request for service arrives 
at the gateway machine, such as for any other 
socket connection, the request for service would 
arrive at a particular socket which would be the 
socket of the socket routing daemon. The process 
with this particular socket open could be either in 
the kernel or running as a user level process. 

Therefore, the socket routing service code can 
be created as a daemon or in the kernel. Prefer- 
ably, the socket routing service code will exist 
mostly or completely as a daemon. Some minor 
parts, such as ioctls (input output controls) to tie 
sockets together, may exist as part of the kernel. 
However, these minor parts support the daemon, 
and are not really a part of the socket routing 
service code. As an alternative, it is also possible 



to put the routing implementation part (as opposed 
to the route figuring out part) in the kernel, which 
would save process context switch time. 

Another modification may be made to imple- 

5 ment the socket routing of this invention. The 
nameserver may be modified for domain gateways 
and routing information. The (name) domain name 
server needs to have a type of data for inter- 
(socket) domain gateways. It may also be desirable 

10 for it to find gateways when looking up a host 
address. It would be desirable if it would flag the 
fact that a host requires an inter(socket) domain 
gateway to get to it. 

At least in its preferred embodiments this in- 

75 vention is able to: automatically route connections 
between data processing systems that utilize dif- 
ferent protocols, independently of said applications 
running on said data processing systems; route, at 
the socket level, between two networks when a 

20 cross-domain connection attempt is detected; facili- 
tate the interconnection between data processing 
systems by allowing socket based applications to 
easily span across different networks; communicate 
between data processing systems in which one of 

25 the data processing systems utilizes TCP'IP and 
the other data processing system utilizes SNA; 
communicate between two data processing sys- 
tems via a third data processing system utilized as 
a TCP to SNA gateway; and communicate through 

30 a connection between two data processing systems 
both utilizing TCP on each of their local Internets, 
by bridging the network connection with a long haul 
SNA connection. 

While the invention has been particularly 

35 shown and described with reference to a preferred 
embodiment including sockets, the underlying idea 
of cross domain connections could be achieved 
with other operating systems having other commu- 
nication endpoints other than sockets. It will be 

40 understood by those skilled in the art that various 
changes in form and detail may be made without 
departing from scope of the invention. 

45 Claims 

1 , A system for communicating between a first 
data processing system in a first network domain 
and a second data processing system in a second 

50 network domain, said system comprising: at least 
one communication end point object in a layer of 
each of said first data processing system and in 
said second data processing system; means, in- 
dependently of an application running on either of 

55 said data processing systems, for automatically 
routing, in said layer, a connection between said 
first processing system and said second process- 
ing system; and means for communicating over 
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said routed connection between said first data pro- 
cessing systenn and said second data processing. 

2- A system as clainned in claim 1 wherein the 
first network domain is a Transmission Control Pro- 
tocol and the second network domain is a Systems 5 
Network Architecture. 

3. A system as claimed in claim 1 or 2, further 
comprising at least one communication end point 
object in said layer of an Intermediate data pro- 
cessing system; wherein said means for automati- io 
cally routing is in said intermediate data processing 
system, and said routed connection passes through 

said intermediate processing system. 

4. A system as claimed in claim 3 wherein said 
means for communication in said intermediate pro- 75 
cessing system immediately sends any data re- 
ceived from one end of said routed connection to 
said other end of said routed connection. 

5. A system as claimed In any preceding claim 
wherein said at least one communication end point 20 
object is a socket and said layer is a socket layer. 

6. A method for communicating between a first 
data processing system in a first network domain 
and a second data processing system in a second 
network domain, said method comprising: creating, 25 
by said first data processing system, a socket in 

said second network domain; and invoking a rout- 
ing facility to automatically connect a socket in said 
first data processing system to said created socket 
in said second data processing system when said 30 
socket is created in said second network domain; 
and communicating over said socket connection 
between said socket in said first data processing 
system in said first domain and said created socket 
in said second data processing system in said 35 
second domain. 

7. A method for communicating between a first 
data processing system in a first network domain 
and a second data processing system in a second 
network domain, said method comprising: deter- 40 
mining a means to make a connection between a 

first socket in said first data processing system and 
said second data processing system; creating a 
second socket in the domain of the second data 
processing system to establish the determined 45 
connection; and communicating over said deter- 
mined connection between said socket in said first 
data processing system in said first domain and 
said created socket in said second domain of said 
second data processing system. so 

8. A data processing network having a first data 
processor communicating with said network using 
either a first communication protocol or a second 
communication protocol and a second data proces- 
sor communicating with said network using said 55 
first data communication protocol, said data pro- 
cessors having an application program interface 
including communication end points via which ap- 



plication programs may communicate, each said 
communication end point being adapted for com- 
munication using a single one of either said first 
communication protocol or said second commu- 
nication protocol, characterised in that said first 
processor includes connection logic interposed be- 
tween communication end points in said first pro- 
cessor for routing data from a communication end 
point adapted for communication using said first 
communication protocol to a communication end 
point adapted for communication using second 
communication protocol. 
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